Deep Malware Analysis of 1db68991d2fc57b5792b0a5b87840d91 | md5: 1db68991d2fc57b5792b0a5b87840d91 | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1db68991d2fc57b5792b0a5b87840d91
Sha1	728f9feda807d941d8d42e61d31f3815f61355df
Sha256	9230a60ab7f69d305a099648d0de8766b2b808df7670b00fc79eaec8eb2eb77b
Sha384	c6e3bcea96974ca9c7162ce1417392515d8e2edad9e707a0ee6ab346609fdd05d6eb564abc17aa5c9510e20fe88a07f7
Sha512	54548f5c9ff6c5458aa8ce66e62952580eeb3a7d31e608d15f384e15df67c31db75d4dcb7ca0fdc01d0fe708f12fc15613c2fb384ac8f025faa20eb0ea10c779
SSDeep	49152:hTHwjPj8FGH2PJ/E4Qmj9uDb5pak6dR36T:h0bweS3K
TLSH	AB463C07AA9404F8C68AD33188B94A6637717D9E573277D71F64BBB42F227E05E34B08

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x573600 size 8104 bytes